Comcast thinks it ok to install public wifi in your house

Scott Helms khelms at zcorum.com
Thu Dec 11 14:37:22 UTC 2014


It is, you only have to log in once and then it remembers your MAC
address.  Harvesting usable MAC addresses is as trivial as putting up an
open access point with the SSIDs xfinitywifi and CableWifi and recording
the MAC addresses that connect to it.


Scott Helms
Vice President of Technology
ZCorum
(678) 507-5000
--------------------------------
http://twitter.com/kscotthelms
--------------------------------

On Thu, Dec 11, 2014 at 9:30 AM, John Peach <john-nanog at peachfamily.net>
wrote:

> On Thu, 11 Dec 2014 09:24:10 -0500
> Valdis.Kletnieks at vt.edu wrote:
>
> > On Thu, 11 Dec 2014 00:11:07 -0500, Jay Ashworth said:
> > > I will give them their props: I only had to sign in *once*, last
> > > year; their auth controller has recognized my MAC address at every
> > > spot I've used since.
> >
> > Actually, that's sort of scary if you think about it too hard.
> > Shared-secret authentication has its flaws, but it still beats
> > shared-nonsecret auth.
> >
> > I really hope it's something on your laptop other than the mac
> > address....
>
> It's not - Cablevision allow you to register devices via their
> website.... by mac address.
>



More information about the NANOG mailing list